{
  "artifact": "HRI-HSIMC-WP-PARTIII-CLAIM-PROVENANCE-C0-013-20261019",
  "edition": "C0-013-PART-III-6L",
  "source_uploaded_AI_transcript": {
    "source_title": "MCP 服务器能做什么 - Google Search (user-provided AI Mode capture)",
    "pages": 43,
    "source_sha256": "96fb84ea0b272df52646d30f65eea112e5adf90ffffeaf9c6492b361bc6b45ee",
    "source_kind": "AI-generated exploratory conversation, not verified technical documentation",
    "use": "Scenarios and research questions only: Smart Life/Tuya and Home Assistant, Matter, local AI and external sensors/relays, display and power, local-v-cloud control, trust and safe physical actuation.",
    "cautions": [
      "Do not claim MCP alone grants Android accessibility, hardware control, user credentials or local network access.",
      "Do not claim Matter is unencrypted or supports unconsented pairing; fabric credentials and commissioning required.",
      "Do not claim Android USB-C phones universally support DP Alt Mode or external video.",
      "Do not claim NNAPI/any NPU backend can automatically execute a model on every retired phone.",
      "Do not claim local or cloud vendor integration is universally free, legal or independent of vendor terms.",
      "Do not advertise control by obtaining keys without the rightful device owner and vendor permissions.",
      "Do not let a model directly issue unrestricted raw serial, relay, heater or motor commands. Independent safety interlocks and local policy mandatory.",
      "Do not claim 10 billion eligible phones are already online and controllable."
    ]
  },
  "status": "EXPLORATORY_PROMPTS_AND_HYPOTHESES_ONLY",
  "official_technical_claims": [
    {
      "id": "E1",
      "title": "Model Context Protocol · Tools specification (2026-07-28)",
      "url": "https://modelcontextprotocol.io/specification/2026-07-28/server/tools",
      "basis": "Tool schemas and mandatory server controls; human oversight."
    },
    {
      "id": "E2",
      "title": "Model Context Protocol · HTTP Authorization (2026-07-28)",
      "url": "https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization",
      "basis": "Transport authorization distinct from local operating-system privilege."
    },
    {
      "id": "E3",
      "title": "Home Assistant · MCP Server Integration",
      "url": "https://www.home-assistant.io/integrations/mcp_server/",
      "basis": "Official integration and selectively exposed devices/entities."
    },
    {
      "id": "E4",
      "title": "Google Home Developers · Matter commissioning",
      "url": "https://developers.home.google.com/matter/primer/commissioning",
      "basis": "Device pairing and cryptographic operational commissioning."
    },
    {
      "id": "E5",
      "title": "Google Home Developers · Matter fabric and multi-admin",
      "url": "https://developers.home.google.com/matter/primer/fabric",
      "basis": "Secure fabric domains, credentials and multi-admin boundaries."
    },
    {
      "id": "E6",
      "title": "Android Developers · USB host overview",
      "url": "https://developer.android.com/develop/connectivity/usb/host",
      "basis": "Device-dependent USB hardware and user permission."
    },
    {
      "id": "E7",
      "title": "Android Developers · Media projection",
      "url": "https://developer.android.com/media/grow/media-projection",
      "basis": "Per-session capture consent and foreground-service requirements."
    },
    {
      "id": "E8",
      "title": "Android Developers · NNAPI migration guide",
      "url": "https://developer.android.com/ndk/guides/neuralnetworks/migration-guide",
      "basis": "NNAPI deprecated; inferencing runtime performance not universal."
    },
    {
      "id": "E9",
      "title": "Model Context Protocol · Local Server Security (official source)",
      "url": "https://github.com/modelcontextprotocol/modelcontextprotocol/blob/main/docs/docs/2026-07-28/tutorials/security/local-server-security.mdx",
      "basis": "A local MCP child process can inherit host access; isolation and least privilege matter beyond protocol auth."
    }
  ],
  "reference_hsimc": [
    "C0-009 frozen heading map",
    "C0-010-R1 correct global Ten Billion = 百亿",
    "C0-012 Parts II no-one-left-behind"
  ],
  "critical_boundary": "MCP tool exposure does not grant OS access, Matter commissioning, third-party commercial license or an executable right to actuate physical equipment.",
  "separate_human_local_gate": "Required as a separate HSIMC contract and host policy enforcement, not a native MCP protocol guarantee",
  "tested_hardware_this_edition": false,
  "independent_language_review": "PENDING"
}